Any reason for taskmgr.exe to access the internet?

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

When ever I open the Task Manager, Zone Alarm asks if I want to allow
taskmgr.exe to access the internet. I kept opening it a number of times to
checkout the different IP address. When I reverse DNS to IP it is trying to
reach, I get top level domains at Microsoft, ESSET - my spyware publisher,
Google, and some unresolved addresses.

1) Is this normal?
2) Is there any reason taskmgr.exe accesses the internet (I've been denying
access).
3) Are there any good resource on what XP programs and XP processes should
not be accessing the internet?
 
Stewart said:
When ever I open the Task Manager, Zone Alarm asks if I want to allow
taskmgr.exe to access the internet. I kept opening it a number of
times to checkout the different IP address. When I reverse DNS to IP
it is trying to reach, I get top level domains at Microsoft, ESSET -
my spyware publisher, Google, and some unresolved addresses.

Just my opinions, and results of tests I just made:
1) Is this normal?
No, I don't think so. I've never noticed it, never seen that
message, and my logs don't show any such attempts.
2) Is there any reason taskmgr.exe accesses the internet (I've been
denying access).
Not that I can think of, assuming your OS is legal, properly activated
and running well. Personally I think it's a red flag, but I'll stand by and
see what others have to say about it.
Is your PC standalone or part of a LAN maybe? Not sure what a LAN might
cause to happen, but since you say you've chased down reverse DNS and get
some unknowns, I'd be suspicious.
I almost (ONLY almost!) wish I had the problem; I'd be interested in
tracking down a couple of those unknowns to see what they were about said:
3) Are there any good resource on what XP programs and XP processes
should not be accessing the internet?
Not that I know of, but mainly, if it's intended to go to the 'net, it
will unless you've set an app not to. Apps like Word, Excel can, under the
right circs, access the 'net, but that would be something you caused.
Check your firewall to see which progs might have been trying to access
it. Also Event Viewer; Security log and Apps log.

It -could- be a coincidence, or something that TaskManage triggers, causing
malware to make the attempts; I think that's the first thing I'd think of
and try to check out.

You'd do well to indicate your OS type, firewall, anti-virus and spyware
apps, too, and how well you keep them updated or not. AV and spyware scans
should be run often, anyway unless you're certain you're absolutely locked
down, and even then I still run them for GPs.

HTH

Pop`
 
Back
Top